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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 



LISTING OF CLAIMS : 

1 . (Currently Amended) Network security system for detecting security 
relevant irregularities in a network, comprising; 

data sources located on and/ or constituting the network, with means for 
generating network-security relevant data; 

an input module, with input handlers for various protocols to connect to the 
data sources; 

at least one processing module, connected to said input module for access to 
said data sources, with means for translating said network-security relevant data into 
quantitative variables; 

a supervisory system, with means for presenting processed data to a security 
system operator; and 

an interface module, with means for transferring said quantitative variables 
from the processing module to the supervisory system. 



2. (Currently Amended) Security system as in claim 1 , charact e riz e d i n, that 
wherein said data sources comprise routers, firewalls, hosts, applications, switches, 
NIDS, H IDS or any combination thereof. 
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3. (Currently Amended) Security system as in any of claims 1 or 2, 
charact e riz e d in, that claim 1 , wherein the network-security relevant data consists of 
comprises: 

numerical values maintained via increment/decrement operations, rate 
calculations, pass-through of values or evaluation of mathematical expressions 
involving multiple values or any combination thereof, and /or 

textual values maintained via template matching, text transformation, text 
translation, and composition of text from templates, text strings from incoming data 
and numerical values from incoming data or any combination thereof. 

4. (Currently Amended) Security system as in any of c l a i ms 1 or 3, 
charact e r i z e d i n, that claim 1, wherein said supervisory system comprises! 

means for displaying said variables to ae a system operator, and reaction 
facilities with means for initiating predefined countermeasures. 

5. (Currently Amended) Security system as in any of c l aims 1 to 4 , 
charact e r i z e d in, that claim 1 , wherein the processing modules act on individual 
incoming data messages and batches of those messages. 

6. (Currently Amended) Security system as in any of cla i ms 1 to 5, 
characterized i n, that claim 1, wherein the displaying means display the security 
status/health information as quantitative trend graphs with historical data storage and 
zoom in/out function. 

7. (Currently Amended) Security system as in any of claims 1 to 6, 
charact e r i z e d i n, that claim 1 . wherein the displaying means display a schematical 
depiction of the network and device structure and topology. 
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8. (Currently Amended) Security system as in c l aims claim 7, charact e r i zed 
i n, that wherein the visual elements denote security status by means of coloring 
and/or numerical and/or textual annotations 

9. (Currently Amended) Security system as in any of cla i ms 1 to 8, 
charact e riz e d i n, that claim 1 , wherein the system further comprises: 

storage means for maintaining temporary and persistent records of the 
results of the processing steps for later in-depth analysis. 

10. (Currently Amended) Automation system operator workstation in a 
network with an automation system, comprising: 

means for controlling the processes of the automation system over the 
network, said controlling means comprising a human machine interface with means 
for displaying information about the automation system to an automation system 
operator and means for entering commands for controlling the automation system, 
said automation system operator workstation being connected to a security system 
as claimed in any of th e pr e c e ding c l a i ms claim 1 . wherein the supervisory system is 
integrated into the automation system controlling means, said status and trend 
presenting means being included in the information displaying system of the human 
machine interface, and said countermeasures initiating means being integrated in 
the commands entering means. 



